Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Fremont
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated activity that requires a combination of real-word experience, IT skills and business savvy. It also requires working closely with the ransomware victim's IT staff and the insurance carrier, if any. Because the number one goal of the ransomware victim is operational continuity, it is critical to establish response groups that operate efficiently, concurrently, and in close communication. Progent has the breadth of IT skills and the depth of personnel to complement your network staff and restore your network environment quickly and economically.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware used in the attack
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Validating the hacker's decryption capabilities
• Budgeting a settlement payment with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the threat actor
• Confirming adherence to anti-money laundering sanctions
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and operating the TA's decryption utility
• If necessary, contacting the TA for technical help with the decryptor tool

• Quarantining infected endpoints and data stores to prevent further spread of the assault
• Making digital copies of every breached server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing A/V protection to all virus-free endpoints
• Recovering files from offline backups or unscathed machines
• Creating a clean recovery environment
• Remapping and reconnecting drives to match precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern variants of ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly try to exfiltrate files. TAs can then require an additional ransom for not divulging this information or selling it. Sadly, there is no way to be certain that exfiltrated data have been totally erased by the threat actor. Actually, in numerous cases the threat actor has limited control about the disposition of the data. Settling an exfiltration ransom does not free you from the need for getting the advice of privacy attorneys, conducting an investigation into which data were stolen, and performing the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the United States for over two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have been awarded advanced certifications in core technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning applications. This broad array of skills allows Progent to salvage and integrate the surviving pieces of your information system following a ransomware assault and rebuild them quickly into a functioning network. Progent has worked with leading cyber insurance providers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Fremont
To contact with Progent about crypto-ransomware settlement guidance in Fremont, phone Progent at 800-462-8800 or go to Contact Progent.